rdsh

A launcher for DeepSeek Harness. Frequently used commands are implemented in Rust; conversations and model execution stay in upstream dsh. Existing arguments pass through unchanged.

single binary MIT Linux / macOS / WSL / Windows

Repository

jimoto-no-llm/rustdsh

Version

0.12.0

Language

Rust 1.85+

Binary

1.97 MB

Install

curl -fsSL https://github.com/jimoto-no-llm/rustdsh/releases/latest/download/install.sh | bash -s -- --from-release

$f = Join-Path $env:TEMP 'rdsh-install.ps1'
Invoke-WebRequest -Uri https://github.com/jimoto-no-llm/rustdsh/releases/latest/download/install.ps1 -OutFile $f -UseBasicParsing
& $f -FromRelease

Running

Goal	Command
Check the install	`rdsh --version && rdsh doctor`
Start the TUI	`rdsh tui`
Web profile	`rdsh --profile web`
Replace dsh	`./install.sh --as-dsh`
Undo the replacement	`./install.sh --restore`

Note

--as-dsh replaces the dsh command with rdsh. The original stays available as dsh-orig, and --restore puts it back.

How it fits

Language	Rust. Runs as a single binary
Upstream	dsh arguments and subcommands are forwarded unchanged
Out of scope	Conversation loops and model execution belong to upstream
Numbers	BENCHMARKS.md
Safety	SAFETY.md

BENCHMARKS.md

Measured on Linux x86_64. No estimates or conversions.

rdsh against upstream dsh
Item	rdsh	upstream dsh	ratio
`--version` startup	0.90 ms	88 ms	98×
Peak memory	2.9 MB	66 MB	1/23
Hook-equivalent memory	2.7 MB	45 MB	1/16
Code search	17 ms	41 ms	2.4×
Token estimate	12 ms	35 ms	2.9×
Session list	0.41 s	1.65 s	4.0×
Distribution	1.97 MB	508 MB	—

Reproduce

Run rdsh bench --n 5. Setup and raw data live in docs/BENCHMARKS.md.

How to read it

Startup time is the median of five runs on a warm cache.
Memory is peak RSS right after start-up.
Search, tokens and sessions use the same input on both sides.
Distribution size is one binary; upstream is the whole Node.js tree.

COMMANDS.md

Commands that finish without starting Node.js. Arguments match dsh.

Filter commands

Command	Purpose	Output
`tokens`	Token estimate. CJK counts as one token per character.	number
`prune`	Trim context to a token budget.	text
`search`	Parallel text search.	matches
`sessions`	Session list with token estimates.	table
`compact`	Compact a session JSONL. The source file stays.	file
`doctor`	Checks dsh, the environment and paths.	diagnosis
`profiles`	Available profiles.	list
`skills`	Available skills.	list
`desktop`	Detect the Desktop app and attach plugins.	state
`bench`	Startup comparison between rdsh and dsh.	table
`features`	Feature switches and their defaults.	list
`auth`	Inspect login state and import credentials.	state
`guard`	Runs as a hook and blocks dangerous commands.	verdict
`context`	Build, inject and remember turn context.	JSON
`deps`	Dependency graph and change impact.	graph
`serve`	Local-only status page.	HTTP

Examples

sh

rdsh tokens ./README.md
rdsh search TODO --dir . --max 100
rdsh sessions --limit 20 --tokens
rdsh bench --n 5
rdsh features

Requirement

guard and context run from dsh hooks.json. context hook install appends without removing existing hooks and keeps a backup next to the file it rewrites.

SAFETY.md

Nothing breaks by default. Risky behaviour is opt-in.

Principles

Upstream fidelityConversation loops and agent logic are never reimplemented; they go straight to dsh.
Non-destructiveRead paths such as tokens, search, sessions and compact never modify source files.
Explicit authCredentials are not sent externally or synced automatically. Only approved items are imported.
Tool sandboxing (opt-in)On Linux, --share-file shows only the files you share, read-only and without network.
Explicit defaultsUpdate checks are on. serve, search-web, context_engine and agent_tool_sandbox are opt-in.

Blocking with a hook

sh

echo "$input" | rdsh guard --deny "rm -rf /*" --deny "*token*"

hooks.json

{ "matcher": "Bash",
  "hooks": [{ "type": "command",
              "command": "rdsh guard --deny \"rm -rf /*\"" }] }

Feature switches

ID	Default	What it does
`update_check`	on	Update check and notifications
`serve`	off	Local status page
`search-web`	off	Search through SearXNG
`context_engine`	off	Turn context assembly
`agent_tool_sandbox`	off	Runs that only see shared files

rdsh features on <id> enables one; rdsh features lists them.

WEB.md

Web UI, dashboard and Desktop app wiring. All of it stays local.

Lightweight status page

A small page bound to localhost (default :38080, no conflict with DSH on :3080). Requests need a one-time token.

sh

rdsh settings set extras.enable serve
rdsh serve

Dashboard

An optional Node.js dashboard (22+) for project metrics and human-in-the-loop questions. On Windows it lives in the system tray.

sh

rdsh-dashboard project --project <directory>

Desktop app

DeepSeek Harness Desktop is an Electron shell around the Web app. It owns a separate profile, so rdsh only detects it and forwards plugin attachment; it never rewrites the profile.

sh

rdsh desktop status
rdsh desktop install --plugins-dir .
rdsh desktop verify

Order

Quit the app before attaching plugins and reopen it afterwards. The in-app Plugins page installs the same packages directly.